Merge branch 'main' of ssh://git.ghoscht.com:2222/ghoscht/nix-config

crowdsec: v1.6.2->v1.6.3

hosts/franz/arion/git/arion-compose.nix

@@ -10,7 +10,7 @@
 
   services = {
     forgejo.service = {
-      image = "codeberg.org/forgejo/forgejo:8.0.0";
+      image = "codeberg.org/forgejo/forgejo:8.0.3";
       container_name = "forgejo";
       useHostStore = true;
       labels = {

hosts/franz/arion/infrastructure/arion-compose.nix

@@ -35,6 +35,11 @@
 
         "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme" = "https";
         "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto" = "https";
+
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.sort_tags" = "semver";
+        "diun.include_tags" = "^v\\d+\\.\\d+\\.\\d+$$";
       };
       volumes = [
         "/home/ghoscht/.docker/infrastructure/traefik_config/traefik.yml:/traefik.yml:ro"
@@ -52,7 +57,7 @@
       ];
     };
     crowdsec.service = {
-      image = "crowdsecurity/crowdsec:v1.6.2";
+      image = "crowdsecurity/crowdsec:v1.6.3";
       container_name = "crowdsec";
       environment = {
         GID = "1000";
@@ -67,6 +72,12 @@
         "traefik-logs:/var/log/traefik/:ro"
         "/var/run/docker.sock:/var/run/docker.sock:ro"
       ];
+      labels = {
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.sort_tags" = "semver";
+        "diun.include_tags" = "^v\\d+\\.\\d+\\.\\d+$$";
+      };
       depends_on = [
         "traefik"
       ];

hosts/franz/arion/media/arion-compose.nix

@@ -330,7 +330,7 @@
       restart = "always";
     };
     autobrr.service = {
-      image = "ghcr.io/autobrr/autobrr:v1.45.0";
+      image = "ghcr.io/autobrr/autobrr:v1.46.0";
       container_name = "autobrr";
       labels = {
         "traefik.enable" = "true";